Vulnerabilities

TI-2024-10037 CVE-2024-10828 · GHSA-6439-mj9p-x34m

Advanced Order Export For WooCommerce <= 3.5.5 - Unauthenticated PHP Object Injection via Order Details

MEDIUM 46

The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.5.5 via deserialization of untrusted input during Order export when the "Try to…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01459 Published 2024-11-13 No fix listed CWE-502

TI-2022-19018 CVE-2022-40128 · GHSA-662h-7f84-69rv

WordPress Advanced Order Export For WooCommerce plugin <= 3.3.2 - Cross-Site Request Forgery (CSRF) vulnerability

LOW 29

Cross-Site Request Forgery (CSRF) vulnerability in Advanced Order Export For WooCommerce plugin <= 3.3.2 on WordPress leading to export file download.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00427 Published 2022-11-08 No fix listed CWE-352

TI-2022-15953 CVE-2022-35275 · GHSA-3h2r-mh7w-gr5w

Cross-site scripting in AlgolPlus Advanced Order Export For WooCommerce

LOW 23

Authenticated (shop manager+) Reflected Cross-Site Scripting (XSS) vulnerability in AlgolPlus Advanced Order Export For WooCommerce plugin <= 3.3.1 at WordPress.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00562 Published 2022-09-09 No fix listed CWE-79

TI-2021-06461 CVE-2021-24169 · GHSA-w2gv-7447-6h8c

Advanced Order Export For WooCommerce < 3.1.8 - Reflected Cross-Site Scripting (XSS)

MEDIUM 40

This Advanced Order Export For WooCommerce WordPress plugin before 3.1.8 helps you to easily export WooCommerce order data.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.10348 Published 2021-04-05 Fixed in 3.1.8 CWE-79

TI-2021-08852 CVE-2021-27349 · GHSA-6qrc-68pp-rj6x

Advanced Order Export before 3.1.8 for WooCommerce allows XSS, a different vulnerability than CVE-2020-11727.

LOW 29

Advanced Order Export before 3.1.8 for WooCommerce allows XSS, a different vulnerability than CVE-2020-11727.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00776 Published 2021-03-31 No fix listed CWE-79

TI-2020-09417 CVE-2020-11727 · GHSA-6887-rccf-7c23

A cross-site scripting (XSS) vulnerability in the AlgolPlus Advanced Order Export For…

LOW 31

A cross-site scripting (XSS) vulnerability in the AlgolPlus Advanced Order Export For WooCommerce plugin 3.1.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the view/settings-form.php w…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01955 Published 2020-05-06 No fix listed CWE-79

TI-2018-08240 CVE-2018-11525 · GHSA-p8xr-vj9g-9j25

The plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is vulnerable to CSV Injection.

MEDIUM 42

The plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is vulnerable to CSV Injection.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.04962 Published 2018-06-19 No fix listed CWE-1236

Vulnerabilities

Filters

Advanced Order Export For WooCommerce <= 3.5.5 - Unauthenticated PHP Object Injection via Order Details

WordPress Advanced Order Export For WooCommerce plugin <= 3.3.2 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-site scripting in AlgolPlus Advanced Order Export For WooCommerce

Advanced Order Export For WooCommerce < 3.1.8 - Reflected Cross-Site Scripting (XSS)

Advanced Order Export before 3.1.8 for WooCommerce allows XSS, a different vulnerability than CVE-2020-11727.

A cross-site scripting (XSS) vulnerability in the AlgolPlus Advanced Order Export For…

The plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is vulnerable to CSV Injection.